Proton Mail SMS Verification: A Testing Checklist and Workflow

Pre-flight checklist before you request a Proton Mail code

Proton Mail SMS verification for testing goes smoothly when the groundwork is done first:

• Know why Proton is asking. Confirm the screen offers SMS as a verification option for this sign-up or recovery step.
• Pick the country on purpose. Match the market of the account or the scenario in your test plan.
• Check price and availability. Call GET /api/v1/prices?country=<id>&service=protonmail or look in the dashboard.
• Have a receiver ready. A webhook endpoint subscribed to activation.sms_received, or a polling loop with a sensible interval.
• Plan the mailbox's future. If it must recover or re-verify later, a Dedicated Number may suit better.
• Re-read the rules. Proton's terms and OTP Route's Acceptable Use Policy both apply.

Where does Proton Mail ask for a phone number?

Proton Mail is a privacy-focused email service and keeps phone use to a minimum. The usual moment is human verification at sign-up: when Proton wants extra assurance that a new account belongs to a real person, it can offer an SMS code as one of several options. Account holders may also add a number as a recovery method. Two-step login on Proton relies on authenticator apps or security keys rather than SMS, so a number used once at sign-up is not needed for later logins unless you also saved it as the recovery phone.

Step by step: the Proton Mail verification code API

1. Authenticate with a Bearer key (prefix or_live_) created in the Developer console.
2. Read the price with GET /api/v1/prices?country=de&service=protonmail, or another country id.
3. Order through POST /api/v1/activations with {"service": "protonmail", "country": "de"}.
4. Enter the returned number in Proton's verification field.
5. Receive the code. Your webhook gets activation.sms_received; verify the X-OTPRoute-Signature header (HMAC-SHA256 of the timestamp, a dot and the raw body, keyed with the endpoint secret) and reject stale timestamps. Polling GET /api/v1/activations/{id} is the alternative.
6. Record the result keyed on the activation id so a redelivered webhook is processed only once.

Each account allows 10 API keys, 5 webhook endpoints and 300 requests per minute. For a longer walk-through see webhook-based OTP capture.

Step by step: the same task in the dashboard

1. Sign in and open the OTP Gateway.
2. Search for Proton Mail and choose a country.
3. Check the price shown, then confirm.
4. Paste the number into Proton's SMS verification screen.
5. Keep the order open; the code appears next to the number when the message lands.
6. Cancel if Proton never sends, or let the 20-minute window expire. Either way the wallet is refunded.

Which countries can host a Proton Mail phone number?

The Proton Mail route currently spans 197 countries. Examples include Switzerland, Germany, the United Kingdom, Brazil, India, France, Spain, Mexico, Indonesia, the Philippines, Nigeria, Kenya, Japan, Poland and the United States. Country choice matters: a test of a German-language onboarding path should use a German number, and an account run by a team in Brazil looks more consistent with a Brazilian one. Live options for any service come from GET /api/v1/countries together with the prices endpoint.

Troubleshooting: the Proton Mail SMS did not arrive

• Virtual number declined. Proton may refuse numbers it treats as virtual. Pick a different human verification method or another route; the refund covers the attempt.
• Nothing yet. Let the 20-minute window finish rather than reordering at once; rapid repeat orders rarely help.
• Busy route. Retry later, or choose another country that still fits the test case.
• Silent webhook. Check the endpoint secret, the signature logic and your server clock, then compare with a direct GET /api/v1/activations/{id}.

When is a Dedicated Number the better choice?

A one-time number is right for a sign-up check. It is the wrong tool for a mailbox your team must recover months later, because that number will not be reachable again. If the account needs a working recovery phone, such as a shared support inbox or a staging account for regression tests, use a Dedicated Virtual Number in the United States or Canada, from $1.95/month. You keep it while it renews, receive SMS in the dashboard and on your webhook through number.sms_received, and can release it whenever you like. One-time versus dedicated numbers compares the two in depth.

Responsible use and billing

Proton built its product around privacy, and that deserves respect. Use OTP Route numbers to test your own onboarding, to open the accounts your business genuinely needs, or to keep staff's personal numbers off shared logins: one account per real person or business, with Proton's terms followed. Billing is a prepaid USD wallet with no monthly fee, funded by card or USDT/USDC, with a PDF invoice for every top-up, and a sandbox is available on request for integration work. The privacy-first sign-ups page covers related workflows.

Frequently asked questions

How do I receive Proton Mail OTP codes through an API?

Create an activation with service protonmail and your chosen country, enter the number in Proton, then take the code from the activation.sms_received webhook or by polling the activation.

Will Proton accept a virtual number for Proton Mail sign-up?

Not in every case. Proton decides which numbers it trusts, and if no code arrives within 20 minutes you are refunded automatically.

Can I use the same number later to recover the account?

Not with a one-time OTP Gateway number. For a recovery phone you will keep, use a Dedicated Number, offered only in the US and Canada.

Does Proton use SMS for two-factor login?

No. Proton's two-step login uses authenticator apps or security keys. SMS appears mainly during human verification and as a recovery option.

Can I rehearse Proton Mail verification without spending funds?

Yes, for integration work: ask support to switch a development account to sandbox, which returns simulated numbers and codes. Real Proton codes still require a live order.

Is opening several Proton accounts this way allowed?

No. Keep to one account per real person or business and follow Proton's terms; OTP Route exists for testing and operating your own legitimate accounts and products.

Service names are trademarks of their respective owners. OTP Route is not affiliated with them. Use numbers lawfully, follow each service's terms and our Acceptable Use Policy.